Optionally set crossOrigin = 'anonymous'

crossOrigin = 'anonymous' will not send cookies with requests. This
can, for example, cause a login redirect which results in the cross
origin error the code tried to avoid in the first place.